EXCHANGE

Blocking *.bin Files in EOP can cause block of Office Documents

Andres Bohren
Hi All, I just want to write a short Blog Article about Exhange Online Protection (EOP) Malware Filter regarding the *.bin Attachments. Just be aware, that when Adding Linked or Embedded Objects in Office Documents (like PowerPoint), the Objects are added as *.bin Objects and might be catched by the Malware Filter. Import content from other applications into PowerPoint If you rename the *.pptx or add *.zip at the end you can open in with Windows Explorer or any other ZIP Tool.

Exchange Online Cross-tenant mailbox migration (preview)

Andres Bohren
Hi All, There is a Preview for M365 Tenant to Tenant Migration of Exchange Mailboxes. I've tested this in my Lab. Took me several Days to complete the Migration or until i understand everything correctly and had everything fixed. Cross-tenant mailbox migration (preview) https://docs.microsoft.com/en-us/microsoft-365/enterprise/cross-tenant-mailbox-migration?view=o365-worldwide I've created this Overview to explain it a bit more. Here are all prerequisits to create a Tenant to Tenant (aka Cross-tenant) Mailbox Migration. Target Tenant Azure AD Application Create a new Azure AD App registration

Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) 2.1 released

Andres Bohren
Hi All, A few hours ago a new Version of the Microsoft Defender for Office 365 Recommended Configuration Analyzer (ORCA) Module has been released. ORCA 2.1 https://www.powershellgallery.com/packages/ORCA/2.1 To check the installed Module and what's available on PowerShell Gallery use the commands below Get-InstalledModule ORCA Find-Module ORCA Uninstall the old and install the new PowerShell Module Uninstall-Module ORCA Install-Module ORCA Get-InstalledModule ORCA I connect to Exchange Online (with -UseRPSSession Parameter, because i have already installed the Preview of the Module)

Safe Links Block list have been moved to Tenant Allow Block List (TABL)

Andres Bohren
Hi All, The M365 Defender for Office Safe Links Block list have been moved to Tenant Allow Block List (TABL) If you click on "Global Settings" https://security.microsoft.com/safelinksv2 you can see that the Block List have been Migrated Let's check the Tenant Allow/Block List https://security.microsoft.com/tenantAllowBlockList You can view the TenantAllowBlockList Items with the following Exchange command Get-TenantAllowBlockListItems https://docs.microsoft.com/en-us/powershell/module/exchange/get-tenantallowblocklistitems?view=exchange-ps Get-TenantAllowBlockListItems -ListType URL Get-TenantAllowBlockListItems -ListType URL | where {$_.Notes -match "Migrated"} I came across the "

Defender for Office365 Changes in Anti-Malware Notifications

Andres Bohren
Hi All, There has been a change in the Defender for Office 365 Anti-Malware Policy notifications. Summary: internal and external Notifications are gone and Action is changed only to "Quarantine" or "Reject" (with NDR). Not much to see on the M365 Roadmap But there are more Details in the M365 Admin Portal in Message Center In the M365 Defender Portal you can review the Settings https://security.microsoft.com/antimalwarev2 Internal- and ExternalSendernotifcations are gone.

Microsoft 365 Defender "Restricted Users" now called "Restricted Entities"

Andres Bohren
Hi All, In Microsoft 365 Defender "Restricted Users" now called "Restricted Entities", because it can also detect and create an alarm for a compromised Connector https://security.microsoft.com/restrictedentities Respond to a compromised connector https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/respond-compromised-connector?view=o365-worldwide Regards Andres Bohren

Exchange Cumulative Update Error Expired Certificate

Andres Bohren
Good Morning, I've had a customer that encountered the Error below during Exchange 2016 CU23 installation. Error: The following error was generated when "$error.Clear(); Install-ExchangeCertificate -services IIS -DomainController $RoleDomainController if ($RoleIsDatacenter -ne $true -And $RoleIsPartnerHosted -ne $true) { Install-AuthCertificate -DomainController $RoleDomainController } " was run: "System.Security.Cryptography.CryptographicException: The certificate is expired. at Microsoft.Exchange.Configuration.Tasks.Task.ThrowError(Exception exception, ErrorCategory errorCategory, Object target, String helpUrl) at Microsoft.Exchange.Management.SystemConfigurationTasks.InstallExchangeCertificate.InternalProcessRecord() at Microsoft.Exchange.Configuration.Tasks.Task.<ProcessRecord>b__91_1() at Microsoft.Exchange.Configuration.Tasks.Task.InvokeRetryableFunc(String funcName, Action func, Boolean terminatePipelineIfFailed)".

Calendar Availability (Free/Busy) Requests with Microsoft Graph

Andres Bohren
Hi All, I recently had a customer that wanted to write an Application to read the Availability (Free/Busy) from the Calendars of theyr users.Here is how you can do that with Microsoft Graph. First you need an Application in Azure Active Directory with an AppID / ClientID Then you need to be able to Authenticate. I usually use a Certificate for that purpose. As for the Permissions, the Application needs the following: App needs Application Permissions:

Exchange Online: How to fix the "Get-Place" Error

Andres Bohren
Hi All, Since a few weeks i had a strange behavior with the "Get-Place" command. I knew it has worked before. I did get an Error only on a newly created CloudOnly Mailbox it worked. Get-Mailbox -RecipientTypeDetails RoomMailbox Get-Mailbox -RecipientTypeDetails RoomMailbox | Get-Place With the ExchangeOnlineManagement 2.0.6 Preview6 Module it worked perfectly fine I did open a Microsoft Case and the support guided me to Microsoft Graph GET https://graph.microsoft.com/v1.0/places/microsoft.graph.room To get a specific Mailbox use this URL GET https://graph.

Recipient Management without Exchange Server behind the Scenes

Andres Bohren
Hi All, I was digging a little bit deeper into the Recipient Management without Exchange Server. I've already blogged about it how to install the Managment Tools only fo install the Recipient Management PowerShell Install and use Exchange 2019 CU12 Recipient Management PowerShell https://blog.icewolf.ch/archive/2022/04/27/install-and-use-exchange-2019-cu12-recipient-management-powershell.aspx Add-PSSnapin *RecipientManagement Get-PSSnapin As you can see on the Server the Exchange Server 2019 CU12 is installed (Management Tools only) I found the References of the PowerShell Snapins in the Registry here: Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PowerShell\1\PowerShellSnapins